Privacy policy

Data we use

Account identity, professional profile data, community activity, private messages, email preferences and delivery records, registrations, verification requests, safety reports, security logs, and files you deliberately upload.

Purpose and access

Data supports identity, profile display, matching, member communication, moderation, learning, and security. Private messages are visible to their participants; when a participant reports a message, that reported message and the report details become available to the owner and appointed moderators for safety review.

Verification codes are stored only as irreversible hashes, and email delivery records never contain the code. Private files remain accessible only to their owner.

Routine record cleanup

The following records become eligible for routine deletion after the stated number of days from creation:

• Security audit records: 180 days.
• Login attempt records: 30 days.
• Registration verification requests: 7 days.
• Password reset records: 7 days.
• Email delivery records: 90 days.
• Email verification requests: 30 days.
• Email change verification requests: 30 days.

Session records become eligible for cleanup 30 days after expiry or revocation. Cached translations become eligible after their expiry. Cleanup is gradual, so deletion may occur after these thresholds. These retention periods do not extend the validity of verification codes, reset links, or sessions.

These cleanup periods apply to the listed operational records. They are not automatic deletion deadlines for active account profiles, community content, messages, or uploaded files. You can manage your data using the controls below.

Your controls

• Edit your professional profile.
• Manage optional email notifications.
• Export your data or request account deletion.

These controls require sign-in. Your export includes your profile, activity, messages still visible to you, and email delivery history; it does not include passwords or verification secrets. A deletion request is reviewed before it is carried out, and you can follow its status in Privacy Controls. Submitting a request does not immediately delete the account.

Legal review

This operational draft must be reviewed by Saudi legal counsel before public launch.